[BUGFIX] Remove htmlspecialchars from path_Workspace

Remove htmlspecialchars in GridDataService
for path_Workspace and path_Live.

Resolves: #87069
Releases: master, 9.5
Change-Id: I1d5eff4b62ea9657efbe3c88c4a61b8e1b7cf1e3
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/59023


Tested-by: Susanne Moog <look@susi.dev>
Tested-by: TYPO3com <noreply@typo3.com>
Tested-by: Benni Mack <benni@typo3.org>
Reviewed-by: Susanne Moog <look@susi.dev>
Reviewed-by: Benni Mack <benni@typo3.org>

typo3/sysext/workspaces/Classes/Service/GridDataService.php

@@ -176,7 +176,8 @@ class GridDataService implements LoggerAwareInterface
                     $versionArray['label_prevStage'] = htmlspecialchars($stagesObj->getStageTitle($tempStage['uid']));
                     $versionArray['value_prevStage'] = (int)$tempStage['uid'];
                     $versionArray['path_Live'] = htmlspecialchars(BackendUtility::getRecordPath($record['livepid'], '', 999));
-                    $versionArray['path_Workspace'] = htmlspecialchars(BackendUtility::getRecordPath($record['wspid'], '', 999));
+                    // no htmlspecialchars necessary as this is only used in JS via text function
+                    $versionArray['path_Workspace'] = BackendUtility::getRecordPath($record['wspid'], '', 999);
                     $versionArray['workspace_Title'] = htmlspecialchars(WorkspaceService::getWorkspaceTitle($versionRecord['t3ver_wsid']));
                     $versionArray['workspace_Tstamp'] = $versionRecord['tstamp'];
                     $versionArray['workspace_Formated_Tstamp'] = BackendUtility::datetime($versionRecord['tstamp']);